It seems as they are on a blacklist of your duck dns but not because they tried to hack you but because on those IPs where malware / phishing websites hosted. Likely somebody used those server now as Proxy / tor exit node. It's of course possible he had bad intentions but that's not the reason he was blocked. (at least the screenshot suggests that)
Concerning the attack on the wifi I'm not sure what you mean. Do you mean the wifi router / internet modem? Because to gain access to your wifi network from different countries seems very unlikely.
If you could relinquish to the 10G LAN port in some way may be the mikrotik rb5009 fits your needs. It has 1x 10G sfp+, 1x 2,5G and the rest are 1G Ethernet. Also its support by openwrt but I would give RouterOS at least a try.
https://mikrotik.com/product/rb5009ug_s_in
https://openwrt.org/toh/mikrotik/rb5009ug_s_in
Regarding the 10G LAN depending on your needs its may be better of in a DMZ anyway?